Can't ping inside interface of PIX

[frelaxx]

I have a PIX 501 at a remote location and I seem to allow echo-repllies from the inside interface. I have tried ACL's and ICMP commands without success. I have attached a copy of the config.

[Jon Marshall]

Hi

Just to clarify, are you tring to ping the inside interface of the remote pix from the outside of the pix.

If so you cannot do this with pix ver 6.x which i'm assuming is what your pix is running.

You can ping the outside interface form the outside, the inside interface from the inside and you can ping through the pix but you can't ping the outside interface from the inside and vice-versa.

HTH

Jon

[acomiskey]

If you are vpn'ing to the remote pix you can enter the following command in the pix to allow you to ping the inside interface address.

management-access inside

[oabduo983]

make sure the IP you are pinging from belongs to the NY_office subnet... otherwise you will need to have the other subnets in the icmp permit command.

HTH